Reorganizing TLS section to add prohibition on renegotiation

For #363.  Until we have a draft for #496 I'm going to leave this pull request open.  I'll need to add another commit to refer to whatever @mnot produces.